Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WutxhMgi7xIkl1lKz28v9QrXFzo.roa
File: WutxhMgi7xIkl1lKz28v9QrXFzo.roa (raw, json)
Hash identifier: cJVsnexca4P7i0XMmeluC95U3soMcGqD2XGiZGD78eQ=
Subject key identifier: 5A:EB:71:84:C8:22:EF:12:24:97:59:4A:CF:6F:2F:F5:0A:D7:17:3A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DB38D5B03202E1D977741FB7E9C8DBC3E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WutxhMgi7xIkl1lKz28v9QrXFzo.roa
Signing time: Fri 16 Feb 2024 20:13:21 +0000
ROA not before: Fri 16 Feb 2024 20:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b3:8d:5b:03:20:2e:1d:97:77:41:fb:7e:9c:8d:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 16 20:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aeb7184c822ef122497594acf6f2ff50ad7173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:9c:c7:51:6c:46:6a:d9:b8:91:f9:07:43:
4d:6d:db:81:fb:84:db:fb:b0:f1:78:b1:29:43:bc:
a8:bd:60:8e:a6:25:87:fe:d2:45:8a:50:d0:ae:ce:
3f:2c:4e:68:5c:6a:98:19:55:ba:e2:b7:c1:a8:90:
11:fa:67:1f:b3:2c:78:74:f1:70:73:6b:c4:c0:6e:
ac:57:3f:9a:d2:91:f5:25:95:77:66:61:25:b4:60:
f5:9e:e3:01:1f:bf:99:76:3e:ee:c0:09:3f:56:7c:
24:8b:c4:24:6a:c5:4b:66:1c:45:d9:b4:c1:45:4c:
0d:e4:d3:0e:71:90:79:6b:38:69:a8:3e:73:e7:fa:
94:8f:81:33:2e:f5:1c:d1:22:59:f1:bc:50:ea:6f:
b9:9d:90:1f:e4:45:cd:7f:32:77:f7:b2:3a:75:c2:
6d:95:d9:41:68:40:70:bd:90:11:34:79:c1:35:59:
05:5e:23:d4:b7:b5:7a:8f:c8:60:f4:c2:aa:9d:c6:
95:e3:51:cb:d2:b8:ad:0d:14:f8:ff:7e:30:2a:0f:
64:cf:b5:d6:f1:ba:e3:2e:da:6b:dc:bc:49:95:22:
ee:28:db:ae:28:fe:cc:e0:57:0e:73:f9:38:3b:a4:
a3:47:b5:04:01:e0:7e:94:95:8b:dc:9a:6e:22:12:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:71:84:C8:22:EF:12:24:97:59:4A:CF:6F:2F:F5:0A:D7:17:3A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WutxhMgi7xIkl1lKz28v9QrXFzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:92:b2:94:3b:00:9d:29:2d:ca:20:52:65:61:73:68:74:57:
48:05:10:aa:0a:22:86:d6:60:37:ec:46:ca:67:79:f3:d5:1f:
8c:0f:cc:7e:a6:66:92:2a:a6:2c:c1:51:77:0e:f8:f1:4c:22:
14:02:9b:9c:bb:35:9a:12:9e:80:1f:f4:0b:13:59:06:43:f5:
49:75:73:35:62:bf:f1:fe:38:83:4f:2d:04:22:31:f3:c1:50:
f1:70:37:fa:f8:25:17:42:80:67:c4:36:6d:18:97:36:18:23:
8c:dd:87:aa:3c:52:e9:19:5c:46:2c:d3:58:53:f0:00:7b:43:
4e:87:d7:fb:90:66:03:40:82:8d:d3:37:e9:45:ce:01:66:0a:
d9:a4:fa:89:de:e1:69:2f:88:5c:87:94:10:7a:7e:c6:d9:31:
3b:0f:a9:36:91:e2:44:2f:ea:43:1a:83:d0:a6:28:b8:9e:08:
83:e5:c6:d1:ba:23:a5:df:ea:1f:59:00:dc:c6:28:60:56:72:
eb:a9:c2:fc:90:8f:e9:3a:ec:d8:ac:03:c4:dd:21:5b:0a:05:
97:8e:73:f5:49:49:ae:83:a6:8b:45:45:80:cd:69:4c:63:de:
6c:be:a4:23:00:cd:8d:d7:78:17:c0:0b:48:97:45:ff:2a:da:
e7:7a:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:41:37 2025 by rpki-client